RFR: 8296072: CertAttrSet::encode should write into DerOutputStream [v2]
Weijun Wang
weijun at openjdk.org
Fri Oct 28 20:56:58 UTC 2022
> The argument of the `CertAttrSet::encode` interface method is modified from `OutputStream` to `DerOutputStream`. All its implementations are modified the same way.
>
> `OutputStream` is still used by `sun.security.x509.Extension::encode(OutputStream os)` because it's inherited from `java.security.cert.Extension`. The method is now marked final to avoid accidental override.
>
> In `CertificateExtensions` and `CRLExtensions`, only `Extension::encode(DerOutputStream out)` is called. It used to call `CertAttrSet::encode` for a known extension and `Extension::encode(DerOutputStream out)` for an unknown one. This makes sure the overridden `encode` methods in known extensions are always called. Now that they have the same argument, there is no need for this check.
Weijun Wang has updated the pull request incrementally with one additional commit since the last revision:
@Override, used imports, copyright years, and a test
-------------
Changes:
- all: https://git.openjdk.org/jdk/pull/10906/files
- new: https://git.openjdk.org/jdk/pull/10906/files/237dc8dc..05f129b2
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk&pr=10906&range=01
- incr: https://webrevs.openjdk.org/?repo=jdk&pr=10906&range=00-01
Stats: 81 lines in 36 files changed: 25 ins; 35 del; 21 mod
Patch: https://git.openjdk.org/jdk/pull/10906.diff
Fetch: git fetch https://git.openjdk.org/jdk pull/10906/head:pull/10906
PR: https://git.openjdk.org/jdk/pull/10906
More information about the security-dev
mailing list